Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d27f1295-cda2-354c-a078-1411898cded4.roa
File:                     d27f1295-cda2-354c-a078-1411898cded4.roa (raw, json)
Hash identifier:          kdI7yOfY5Z2MxV3X0AcitgdzKDql6In4HV9ywGUhJYg=
Subject key identifier:   52:EE:39:6F:24:90:A8:3E:6D:3D:B8:2A:CF:C6:D3:30:F2:F6:B7:E2
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849F44A6608F328A7DAAA65DCC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d27f1295-cda2-354c-a078-1411898cded4.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        204.195.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:66:08:f3:28:a7:da:aa:65:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=72791bf8-dd7a-4932-8ff8-aaa1d37b18f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fb:8e:12:5b:19:14:88:ca:02:48:4b:ee:f8:
                    ca:7d:ef:c9:e4:91:9a:65:dd:a3:0f:24:ea:49:12:
                    df:34:ad:26:c5:67:cc:4e:a0:55:8e:c7:bc:e6:2f:
                    c2:e8:42:2d:1d:da:5e:fb:6d:ab:a7:72:49:7c:01:
                    5e:0a:c4:4f:c5:bb:41:27:28:92:ed:93:ba:8d:b1:
                    ca:cf:db:5e:b3:f6:ea:b1:3b:41:71:0e:48:20:70:
                    49:00:3c:1d:d0:c9:e1:39:bf:bc:9f:41:92:8a:c5:
                    72:d8:e2:a0:b7:15:df:8a:0f:d4:85:07:de:7c:af:
                    46:84:33:c4:a3:66:0f:72:30:b5:b6:3d:95:c8:12:
                    c6:a7:35:75:bc:6d:6e:21:ec:1d:60:0d:da:e5:86:
                    40:d5:b4:e1:9f:66:67:35:d7:da:dc:4c:5f:06:18:
                    21:6f:5c:b0:66:d5:00:4a:0a:02:ab:1b:e9:11:ed:
                    5a:96:44:60:7b:2a:3d:5a:0a:63:70:6e:2d:20:aa:
                    89:74:2f:79:a0:52:a0:10:dc:8b:5d:98:53:58:f0:
                    17:5b:43:36:be:52:8b:ef:74:db:c2:10:00:b6:d9:
                    f6:f2:6a:38:b9:b3:c9:b4:f9:2f:9b:c2:3c:3c:ff:
                    6f:db:c2:54:9a:ac:b4:32:34:40:b6:61:cf:1a:3d:
                    96:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EE:39:6F:24:90:A8:3E:6D:3D:B8:2A:CF:C6:D3:30:F2:F6:B7:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d27f1295-cda2-354c-a078-1411898cded4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:38:30:17:9a:61:a7:02:da:a6:fe:45:aa:a8:aa:25:2c:
         49:65:05:70:9e:24:bd:44:66:c7:b8:b3:98:c2:06:ca:8e:57:
         08:e3:84:52:1d:6f:0f:39:17:26:1c:74:69:ef:84:3d:03:09:
         1b:ba:94:4a:ce:96:70:0d:67:56:74:b4:cf:05:40:d9:94:ca:
         b9:ee:43:96:72:0f:cf:b6:e0:e8:8e:be:ec:e8:72:1e:0f:76:
         5d:07:6f:54:f7:2d:23:cc:af:1d:4d:55:97:d5:75:89:87:8e:
         8b:95:ba:c9:0d:bc:ca:56:c1:48:77:8e:69:f0:13:0e:3b:b1:
         be:8d:b1:8e:ed:db:ad:81:47:1d:d9:25:77:88:b4:30:ae:a3:
         43:46:77:49:b6:7d:1b:c8:f2:28:4f:71:54:49:9e:54:ac:41:
         b4:64:23:94:e0:0d:03:e4:d8:75:5f:f7:71:c2:cc:df:eb:2d:
         68:91:5a:29:58:86:b4:5d:99:31:02:32:32:e5:10:af:64:79:
         5c:09:d8:67:61:27:0d:0b:6d:ce:1d:75:5e:71:d1:a4:26:39:
         80:7e:34:53:83:4c:df:db:13:d0:5e:49:65:5a:83:2f:72:e0:
         2e:21:c5:ca:a9:36:e6:71:55:96:a9:37:85:3a:6a:3c:30:e4:
         54:db:98:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SmYI8yin2qpl3MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk
NzI3OTFiZjgtZGQ3YS00OTMyLThmZjgtYWFhMWQzN2IxOGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/uOElsZFIjKAkhL7vjKfe/J5JGaZd2jDyTq
SRLfNK0mxWfMTqBVjse85i/C6EItHdpe+22rp3JJfAFeCsRPxbtBJyiS7ZO6jbHK
z9tes/bqsTtBcQ5IIHBJADwd0MnhOb+8n0GSisVy2OKgtxXfig/UhQfefK9GhDPE
o2YPcjC1tj2VyBLGpzV1vG1uIewdYA3a5YZA1bThn2ZnNdfa3ExfBhghb1ywZtUA
SgoCqxvpEe1alkRgeyo9WgpjcG4tIKqJdC95oFKgENyLXZhTWPAXW0M2vlKL73Tb
whAAttn28mo4ubPJtPkvm8I8PP9v28JUmqy0MjRAtmHPGj2W4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFLuOW8kkKg+bT24Ks/G0zDy9rfiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDI3ZjEyOTUtY2RhMi0z
NTRjLWEwNzgtMTQxMTg5OGNkZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADlOODAXmmGnAtqm/kWqqKolLEllBXCeJL1EZse4s5jCBsqOVwjjhFId
bw85FyYcdGnvhD0DCRu6lErOlnANZ1Z0tM8FQNmUyrnuQ5ZyD8+24OiOvuzoch4P
dl0Hb1T3LSPMrx1NVZfVdYmHjouVuskNvMpWwUh3jmnwEw47sb6NsY7t262BRx3Z
JXeItDCuo0NGd0m2fRvI8ihPcVRJnlSsQbRkI5TgDQPk2HVf93HCzN/rLWiRWilY
hrRdmTECMjLlEK9keVwJ2GdhJw0Lbc4ddV5x0aQmOYB+NFODTN/bE9BeSWVagy9y
4C4hxcqpNuZxVZapN4U6ajww5FTbmDI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:37:35 2025 by rpki-client